Themify Builder CSRF Vulnerability Affects Versions n/a through 7.0.5
CVE-2024-24872

8.8HIGH

Key Information:

Vendor
WordPress
Status
Themify Builder
Vendor
CVE Published:
21 February 2024

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in Themify Builder that allows an attacker to perform unauthorized actions on behalf of authenticated users. This can lead to significant security risks, as malicious actions can be executed without the user's consent. This issue impacts versions of Themify Builder from n/a to 7.0.5, making users susceptible to potential exploitation if not addressed.

Affected Version(s)

Themify Builder <= 7.0.5

References

https://patchstack.com/database/vulnerability/themify-bui...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dhabaleshwar Das (Patchstack Alliance)
.